Fix for #3742, Request wrapping fixed for Spring Security

It's called by Spring Security's `ChangeSessionIdAuthenticationStrategy`(https://github.com/spring-projects/spring-security/blob/master/web/src/main/java/org/springframework/security/web/authentication/session/ChangeSessionIdAuthenticationStrategy.java#L48) if the servlet container supports servlet 3.1+ spec.